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Abstract: User-friendly secret sharing encrypts a secret image into n meaningful image shares or shadows first proposed by 
Thien and Lin in 2003. Their scheme can achieve the goal of secret image sharing with the additional capabilities of simple 
visual-management of shadows owing to representing of shadow images as shrunken version of the original image. After 
that, Yang et al. proposed an improved scheme in 2007 by using different primes for various blocks in Shamir's polynomial 
function. In this article, we propose a novel version of(t, n)-threshold user-friendly image sharing scheme which attempts to 
indicate prime number for encoding a t-pixel block based on JPEG-LS prediction technique and utilize LSB matching 
function to hide indicators of the prime numbers. The simulator presents that the proposed scheme attains the properties of 
user-friendly image sharing. In particular, reconstructed image is higher than that of the previous schemes in terms of the 
quality of image. 
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I. INTRODUCTION 

With the advent of high-speed network infrastructure as well as low-cost computing and networking hardware, 
handling and processing digital information by computers and sharing them over internet has become more and more 
popular. Since communication via internet is considered insecurely communicated environment, demands for shielding 
communicated information is compulsory and necessary. So, security of digital data is an important issue in the design of 
communication systems. Data hiding techniques and secret sharing are used to secure confidentiality information while it is 
transmitted through unsecured communication channels. Unlike data hiding technique which provides a way of security for 
digital image data by embedding secret message in preselected meaningful images, called camouflage images [1-3]. 

However, the common weak point of them is that secret image is protected in a single information carrier. Once the 
carrier is damaged or destroyed, the secret image is lost. Differing from aforementioned methods, secret image sharing 
method provides protocol in which a dealer distributes secret data among a set of participants and only the number of the 
participants is important for recovering the secret information in the reconstructed phase. This mechanism is not only fault 
tolerance, but also fast transmission [6, 7] ; such scheme is called a threshold secret sharing scheme. 

The concept of secret sharing scheme was introduced in 1979 by Shamir [4], called the (t, n)-threshold scheme. 
Shamir's scheme is based on polynomial interpolation and the polynomial sharing function of degree t-l is defined as 

S(x) = S + a x X H h a^x* 1 mod p to encode a secret number s into n shadows (denoted S\, s 2 , . . ., s n ), where p is the 

large prime number selected randomly and coefficients a\, a 2 , . . ., fl t -i are random numbers within [0, p-l]. 

1.1. The shares si, s 2 ... s n are produced as s t = S(Xi), for all 1 <i <n, where x\, x 2 , . . ., x n are pair distinct random values. 

1.2. Given any t pairs (x-,^-)- =1 , the secret s can be derived using Lagrange's interpolation formula as 

i=\ j=l,j*i X i X j 

In 2002, Thien and Lin [6] extended the secret sharing scheme from number system to image system, and this is 
called (t, ft)-threshold secret image sharing scheme. In the scheme, coefficients (s, a x ... a t .\) of the Shamir's polynomial are 
considered as pixel values and the modulus p used in the function is set to 251. A secret image is encoded into n meaningless 
shadow images and distributed to n involved participants. The secret image may be only reconstructed without cooperation 
of at least a group of t authorized participants. Any number of shadows less than t cannot be used to reveal the secret image. 

However, from the view point of security, the system may still expose the secret information to attackers since it is 
known that the shares are the noise-like shadow images which may attract malicious user's attention. To conquer this 
shortcoming, recently, many proposed secret image sharing with steganography schemes have been introduced which 
construct n pairs of secret shadows. The produced shadows then are embedded into cover images to generate n camouflage 
images [8-13]. These camouflage images look like cover images and do not draw attacker's attention while transmitted to 
involved participants via Internet. The constraint of above-mentioned schemes is that the size of cover image is more lager 
than that of shadow, so it is commonly not suitable for saved -bandwidth network applications. Besides, although the shadow 
images are no longer noise-like but it is still difficult to manage secret image from the view of image management. 

Therefore, some recent literature has been devised to overcome the above weaknesses [14, 15]. In 2002, Thien and 
Lin [14] proposed an image-sharing mechanism with user-friendly shadow images. Consequently, the generated shadow 
images are like the reduction version of the original secret image. In 2007, Yang et al. [15] enhanced and extended the 
scheme based on (r-l)-degree polynomial functions with different primes in encoding blocks. However, quality of the 
reconstructed images is still inferior, making them infeasible for medical, military, or artistic applications [11, 16-17]. 
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This article presents a novel version of (t, n) user-friendly sharing scheme, capable of producing portrait-looking 
shadow images yet still having properties of a secretimage sharing. Particularly, each shadow image contains a slight amount 
of information from the original image, in which the contents of the shadow play the identification rather than restore the 
original secret image. Herein, the concept of Yang et a/.'s image sharing using polynomial with different primes is used to 
ensure that each shadow image is a user-friendly share. However, the proposed scheme sets different prime numbers for 
encoding different blocks by using the JPEG-LS prediction technique [18-21]. Moreover, to prevent the original image 
degradation, LSB matching function [22] is utilized to hide indicators of the prime numbers. 

The rest of this paper is organized as follows. Section 2 briefly reviews pertinent literature. Section 3 then describes 
the proposed scheme in detail. Section 4 summarizes the experimental results and discussions. Conclusions are finally 
drawn in Section 5. 



II. RELATED WORKS 

In this section, we briefly review the related techniques including the concept of JPEG-LS prediction, using LSB 
matching function for hiding indicators of the prime numbers and Yang et a/.'s scheme in Subsections 2.1, 2.2 and 2.3, 
respectively. 



2.1 JPEG-LS Prediction Technique 

JPEG-LS technique [18-21] is the latest standard for lossless and near lossless image compression, abbreviated 
form of Joint Photographic Experts Group-Lossless Standard. The core algorithm behind JPEG-LS was developed by 
Hewlett Packard in 1990s, called Low Complexity Lossless Compression for Images (LOCO-I) [18]. The detailed design of 
the algorithm can be summarized in Equation (2) depending on the predictive template shown in Figure 1. 

min(A, B) if C > max( A, B) 
X = i max( A, B) if C < min( A, B) > ( 2 ) 
A + B-C otherwise 

where min(A,B) and max(A,#) stand for the minimum and maximum values among pixels A and B, respectively. 
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Figure 1. JPEG-LS predictive template 



According to the Equation (2), predicted value X in Figure 1 will be A (B) when there is a vertical (horizontal) edge 
detection of the current pixel location X shown in Figure 2; or X will be A + B - C when the neighboring pixels have 
comparable values. 
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Figure 2. Edge detection flowcharts (a) C > max (A,£); (b) C < min(A,£) 



2.2 LSB Matching Function for data hiding 

Unlike conventional LSB substitution, where secret message is embedded into cover image by replacing the LSBs 
of the cover image with message bits, LSB matching [22] does not simply replace the LSBs of the cover image with secret 
message bits. In 2009, Chan proposed LSB matching function for data hiding [23]. By adopting a one-dimension approach 
instead of two-dimension approach of the image, the LSBs of a sequence of image pixels are computed by XOR function 
(XF) defined in Equation (3) to be compatible with the message bits. 
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XF( yi ) = LSB 
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(3) 



Where y u yt-\ are pixel values at the location i and respectively. The operator 0 is an exclusive OR operator and 
LSB (.) is the least- significant-bit function. The LSBs compatible algorithm of sequential pixels with message bits is 
presented in Figure 3. 

Input: Assume jj, jv+i are the values at the position i, i+\ in the sequential 

pixels and Si, s z +i are the secret message bits, respectively. 

Output:^ , ^ +1 are stego pixels at the position; and respectively. 

if LSB fy$* Si 
I 

if XF(y' i+1 )=s i+l 



y t =y i -LSB(y i )+LSB(y i ) 



else 



if LSB 



= LSB 



else 



Figure 3. Matching algorithm for pixel and message bit 

2.3 Yang et al.'s user-friendly image sharing scheme 

In their basic (2, n) user- friendly image sharing using polynomials with different primes [15], the secret image is 
first divided into 2-pixel non-overlapping blocks. Then the dealer D choose a set of four primes {p u p 2 , P3, Pa] satisfied by p x 
<Pi <P3 <Pa ^ 251. In the sharing phase, each block of the secret image is encoded into shadows based on Shamir's 
polynomial function with different prime numbers. The prime number used to encode a block is determined according to the 
maximum distance in pixels of block with the last pixel in the previous block. For example, (P n -2, P n -\) and (P n , P n+ \) are the 

previous and current two-pixel blocks, respectively. The pixel P^ leading to the maximum distance from the current block 

to the previous block is defined as in (4): 

[p if \P -P \>\P -P I 

I r n 11 \ r n Vir "+1 n-l\ 



P = 



[P n+l otherwise 



(4) 



The prime number is then determined according to P^ . Additionally, the prime number for encoding the block 

needs to remember which is used to decode the block in the recovering phase. In each two-pixel block, the LSBs are adjusted 
as (00), (01), (10) or (11) to indicate the prime number p u p 2 , P3, or p 4 , respectively, used in decoding the next block. The 
LSB of each pixel in the previous block is modified as follows: 



LSB(P n _ 2 ) = 0, LSB{P n _ { ) = 0 for \P m - P n _ x \ < ( Pl - 1) / 2 
LSB(P n _ 2 ) = 0, LSBiP^ ) = 1 for ( Pl - 1) / 2 < |P mx - P n _ r | < (p 2 - 1) / 2 
LSB(P n _ 2 ) = l,LSB(P n _ l )=0for(p 2 -l)/2<\P^ -/>„_,)< (p 3 -l)/2 
LSB(P n _ 2 ) = 1, LSB(P n _, ) = 1 for (p 3 - 1) / 2 < \P m - P n _ x I < 250 



(5) 



Subsequently, Shamir's polynomial function rewritten as in Equation (6) is applied on the current block. 
S(x) = (a 0 +xxa l )mod Pj for j = 1,2,3,4, (6) 

Where the prime number pj is determined by Equation (5), and the coefficients a 0 and a x are computed asfollows: 
k=(P„-P„_ 1 ) + (p,-l)/2 



{a x ={P n+l -P n _ x ) + { Pj -\)l2 



for j = 1,2,3, (7) 



»o=L(^-^,-i)/2j + (p y -l)/2 
*,=L(^ + i-^-i)/2j+(^-D/2 



forj = 3- (8) 
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Finally, shadow pixels P. (l<i<n) can be found by locating the value that are closest to the average value of pixels in the 

current block, but also satisfy the constraint P t mod p . = s t . 

The recovering procedure starts by determining the prime number from the previously recovered block and shadow 
pixels. Then, using Lagrange interpolation recovers coefficients a 0 and a x . After that, the original pixels P n and P n+X are 
restored through Equation (7) and (8). 

III. PROPOSED SCHEME 

Details of the proposed scheme are given in this section. There are two phases: Sharing and retrieving phase. 

1.3. Sharing phase 

Sharing phase consists of four sub-procedures that may be summarized as in Figure 4. Classification of primes is 
the first procedure used to indentify prime number for encoding a block. Indications of primes are embedded in secret image 
on using LSB matching function in the second procedure. Modified secret image is partitioned into shadows by sharing 
algorithm which is presented in the third procedure. Because Shamir's secret sharing method is employed, shadows look like 
noisy images. Thus, to produce user-friendly share images, an association between the shadow value and the corresponding 
average value of block is executed in the fourth procedure. 
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Figure 4. Flowchart of the sharing phase 

1.3.1. Classification of primes procedure 

To share an secret image (SI) size of (MxN) pixels by using the proposed user-friendly (f, n)-threshold sharing 
system with various prime numbers, The dealer D first selects 2* prime numbers (denoted as pi, p 2 , p 2t ) such that 
p x < p 2 <"'< p 2 t < 251 . These prime numbers used in encoding f-pixel non-overlapping blocks are classified according to 

the maximum distance of block in pixels. In contrast to scheme in [15], the proposed scheme uses the JPEG-LS prediction 
technique [18] to predict value of each pixel depending on the predictive pattern of pixels as in Figure 1 and Equation (2). By 

combining the predicted values and the current pixel value, the maximum distance of the m-th block (denoted as d m ) is 

defined as in (9): 

d m =max(|p;-X;|) for/ = 1,2,-,*, (9) 

Where P l m is the pixel value at the position z-th in the m-th block; X l m is the predicted value of pixel P l m . Next, the 
procedure is continued by indentifying the prime number for block. The criterion to determine prime number for the m-th 
block, called p m , is defined as follows: 

p x if d m <(p 1 -3)/2, 

Pi if (p M - 3) / 2 < d m < (p. - 3) / 2, and 2 < i < 2* , (10) 
p t otherwise. 

This example demonstrates the procedure, in which a (2, 4)-threshold scheme with four (2 2 ) chosen primes {p x , p 2 , P3, Pa) = 
{17, 61, 131, 251}. A secret image SI and its predicted values are shown in Figure 5. 
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Figure 5. An example of a secret image SI and its predicted value 

According to the Figure 5 and Equation (9), value d m is computed (d m = max (1160-1681, 1161-1601) = 8). Following the 
Equation (10), the prime number in encoding m-th block is determined (p m = p 2 = 61) . 

1.3.2. Embedding the prime indicators procedure 

Since Shamir's framework is used in the second phase (recovering phase), the prime numbers necessitate to 
remember for later use. The prime number is encoded as {(0. . .00), (0. . .01). . . or (1 . . . 11)} to indicate the prime numbers {p u 

p 2 .. . or p 2 , }. Other word, the indicator id m of prime p m is defined as Equation (11): 



id,,, = 



(0... 00) for p m = Pl 
(0... 01) for p m =p 2m 



(11) 



(I- 11) for p m =p 2t 

This procedure would be continued by implementing the embedding indicators of primes into SI based on using 
LSB matching function [23], with the result that a matched secret image (MSI) is generated. In that, the LSBs of pixels in 
block indicate the prime number which is used in decoding the next block in the recovering phase. In other word, LSBs of 
pixels in the previous block of m-th block are compatible with the indicators of the prime number p m . 

The matching procedure treat prime indications of block as a sequence bits and consider SI as one-dimensional rather than 
two-dimensional array. The flow chart of matching procedure in (t, n)-threshold proposed scheme is shown as in Figure 6. 
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Figure 6. The flow chart of matching procedure in (t, n)-threshold system 

The following example performs the effectiveness of the embedding procedure. As aforementioned, the prime 
numbers are longer used in the retrieving phase, the indicators of the prime p m =61 (id m = 01) ) are embedded into the SI 



using XOR function. The process of embedding procedure is shown in Figure 7. The indicator bits ( id x m 
prime p m are matched with the LSBs of two pixels in the previous block of m-th block, respectively. 



-Omdidl =l)of 
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As can be seen in the Figure 7, the values of XF(MSI l m _ l )^^XF(MSll l _ l )^ not equal to id l m and/<i^, 
respectively. And according to the pseudo-code shown in Figure 3, the pixel value MSl 2 m _ x is set as SI^-i » me P lxe l value 
MSI l m _ x is set as SI l m _ x + 1 . Generally, in this case, if the conventional LSB replacement method is applied, there are two 
pixel values in SI are modified. In contrast, there is only one pixel in SI is adjusted in this method. 
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Figure 7. Embedding procedure 

1.3.3. Partitioning procedure 

Applying the Shamir's polynomial function of degree (t-1), the procedure divides MSI into non-overlapping blocks, 
each of which contains t pixels. Unlike in the original polynomial, coefficients a\, a 2 ,..., fl t -i are random numbers, the 
process of partitioning m-th block starts by computing the coefficients through the equation as follows: 

U=(Msr m -PMsr m )HP -1)12 if Pm * Pr , (forl ^ fX (12) 

U = \i MSli m - PMSV m )l2\+ (p m - 1)/2 otherwise. 

where PSMV m is predicted value of /-th pixel MSV m in m-th block. It means that the JPEG-LS prediction technique is one 
more time adopted on the MSI image. Then the coefficients/ play as input values of the function: 



5 m (x) = X^ _lm0d Pn 



(13) 



Now, n input values*, (1< j< n) are chosen freely and all xj must be distinguished from each other. With each chosen xj, a 
corresponding value of S m (Xj) is calculated by Equation (13). 

Assume after the previous Subsection, the modified secret image (MSI) is obtained and apply the JPEG-LS prediction 
technique on MSI given as in Figure 8. 
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Figure 8. Anexample of MSI and its predicted values 

To encodes m-th block of MSI, the Equation (13) is implemented with the determined prime number p m =61, in 
which the coefficients f\ and f 2 equal to 22 and 31 (according to Equation (12), f x = (160-168) + (61-1)/ 2 = 22 , 
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f 2 =(161 -160) + (61-1)/ 2 =31). For example (x u x 2 , x 3 , x 4 ) = {1, 2, 3, 4} corresponds to the order of four involved 
participants. Block m is encoded into four packets: S m (x x ) = 53 , S m (x 2 ) = 23 , S m (x 3 ) = 54 and S m (x 4 ) = 23 . 

1.3.4. User-friendly Shadows construction procedure 

Owing to using Shamir's framework, generated shadow images look like noise which may attract the attention of 

the malicious users during transmission. Thus, this Subsection generates user-friendly shadow pixels P^ distributed to the j- 
th participant (1< j< n). The process produced pixel P^ is an association between the value S m (Xj) andm-th block. The 
value of P m J have to satisfy two criteria: 

(i) P m J = p m xk + S m (Xj) where k is a non-negative integer, 

(ii) P m J is the closest value to the average value of m-th block. 
Finally, the obtained value P^ is delivered to the j-th participant. 

Following the above example, the process calculates the shadow P^ for the participant 1 combined S m (x l ) = 53 with the 

average value of pixels in block m (L( 1 60+ 161 )/2 J= 1 60) . The value P^ is chosen 175 because {53, 114, 175, 236} is the set 
of numbers which satisfies the form 61 x k + 53 . 



1.4. Retrieving phase 

Retrieving phase consists of two sub-procedures: reconstruction and recovering which is summarized as in the 
Figure 9. The first sub-procedure is used to join t shadow images based on Lagrange interpolation. Second, recovering 
procedure reveals the original secret image. The details of these phase is presented below: 
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Figure 9. Flowchart of the retrieving phase 

First of all, the reconstruction procedure is started by collecting the shadows from the authorized participants and 
determining the prime number from the initial shadow pixels. Any t of them will be sufficient to reconstruct image. 
According to the Equation (1), the coefficients /i, f 2 ,.. .,f t of the Equation (13) are solved. After that, the recovering original 
image is restored through the Equation (12). 

IV. DISCUSSIONS AND EXPERIMENTAL RESULTS 

Results of the tests executed to demonstrate the feasibility of the proposed scheme are presented in this section. A set of 
images of size 512x512 shown in Figure 10 is used as test images. 




Figure 10. A set of test images of size 512x512: (a) Lena; (b) Jet; (c) Baboon 
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Proposed method uses a (t, ft)-threshold sharing with different prime numbers to generate shadows. According to 
the Subsection 3.1.4, obtained value P^ is similarity to the corresponding pixel in m-th block of MSI. Furthermore, the size 
of each shadow image is lit the size of the secret image. On the other hand, according to the ensuring of the Shamir' method, 
even if (n-t) shadows are lost or corrupted when transferred or stored, it is still possible to recover the secret image. 

Therefore, it can be said that the characteristics of user-friendly image sharing are satisfied in the proposed scheme. 
Figure 11 presents the results obtained using a (2, 4)-threshold scheme with chosen primes {p u Pi, P3, Pa) = {17, 61, 131, 
251 }. The scheme encodes images shown in Figure 10 into four shadows separately; the obtained shadows in Figure 11 (al)- 
(a4), (bl)-(b4), (cl)-(c4) are the results of the Figure 10 (a), (b), (c), respectively. 





mm HI 



(cA) (c4) 

Figure 11. Obtained shadows from (2, 4)-threshold user-friendly image sharing scheme with four different primes {pi, p 2 , 

P3,P*} = {17, 61, 131,251} 



Notably, each shadow image looks like a shrunken version of the original image. So, from the view point of image 
database manager, this similarity allows users to recognize each shadow image with its original image without any 
computation. Of course, this characteristic only provides to distinguish content among multiple shadow images. Because, too 
much detailed information of the secret image is omitted, illegal users cannot obtain a high-quality image from taking a 
single shadow image. The image quality of the reconstructed image is the peak signal-to-noise ration (PSNR) and is defined 
as 



PSNR =10xlog 10 



'255^ 
K MSEj 



DB 



(14) 



where MSE is the mean squared error between original image and recovered image. MSE is evaluated as follow: 

j M N 



MSE- 



(15) 



MxN\ 

Where (MxN) is the size of an image; p { ■ is the original pixel value; and p\ ■ is the recovered pixel value. 

Figure 12 shows images (a), (b) and (c) obtained by direct expansion images of the shadow images Figure 11 (al), (bl) and 
(cl) to the size of the original image. The PSNR values between these images and the original image are 27.62dB, 27.79 and 
2 1 .46dB respectively. 




(» PS?\Ul = 27_<52dB [>> PS^WTZ = 27.79dB £c> PSTsHZ = 21.4l5dB 

Figure 12. Results obtained by expanding a single shadow image to the size of original image: images (a), (b) and (c) 

obtained from Figure 11 (al), (bl) and (cl) 
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In the revealing phase, proposed scheme uses Lagrange's interpolation to restore the original image. Any two of 
shadow images are gathered, the original image can be reconstructed. Figure 13 (a), (b) and (c) are recovered from any two 
shadows of Figure 11 (al)-(a4), (bl)-(b4) and (cl)-(c4), respectively. 




(a.) rS^m = 52_91dB (h} F>S*J7Z = 52_9Dcffi <c> PSTtt = 5 2_S9cffl 

Figure 13. Reconstructed images from any 2 shadow images 



During the embedding procedure, in the sharing phase, hides indicators of prime numbers into secret image on 
using LSB matching function [23], which is used to limit the modification of the secret image. LSB of each pixel is matched 
with the indicator based on XOR function (Equation (3)). Yang et al.'s method uses the conventional LSB replacement 
which embeds indicators of primes into secret image by replacing the LSBs of the secret image with indicator bits. Besides, 
in the scheme of Yang et al., the determination of prime numbers for a block fully depends on the last pixel of the previous 
block. The proposed scheme, by contrast, uses the JPEG-LS prediction technique that estimates accurately predicted pixel 
value. The proposed method rarely uses the equation like Equation (8) in Equation (12). Therefore, the proposed method can 
obtain better quality of the recovered images. Table 1 presents the image qualities of (2, 4)-threshold of the proposed scheme 
compared with those for two previous published user-friendly image sharing method. The values in Table 1 are the PSNR 
values of the recovered images. It reveals that the proposed scheme can reconstruct the original image with a higher quality 
than that of previous schemes. 

Table l.Qualities of the recovered imagesbased on different user-friendly image-sharing schemes in a set of test images 





Thim etal. [14] 


Yang etal. [15] 


Proposed 
scheme 


Lena 


37.37 


50.53 


52.91 


Jet 


39.19 


49.76 


52.90 


Baboon 


34.75 


49.17 


52.89 



Table 2. Comparison of the proposed scheme with others in terms of the average PSNRs value of exp anded shadow images 





Thien etal. [14] 


Yang etal. [15] 


Proposed 
scheme 


Lena 


24.80 


23.32 


27.62 


Jet 


25.65 


23.14 


27.79 


Baboon 


20.55 


18.52 


21.46 



The values shown in the Table 2 are the average PSNRs values of the expanded image and the original image by the 
proposed method and other schemes. Notably, the PSNR value of each shadow image is slightly higher than that of the 
schemes in [14] and [15]. The moderate quality of shadow images in the proposed scheme is convenient in images 
management, rather than recovering a high-quality image based on image-interpolation technique by illegal users. 

V. CONCLUSIONS 

This paper proposed a novel user-friendly image sharing method with different prime numbers that provides 
shadow images among authorized participants. Each participant receives a meaningful image looking like a shrunken version 
of the original image. The proposed scheme is based on Yang et al.'s framework. However, in this paper, the prime number 
is determined according to the predicted value which leads to the small prime number in encoding block. In addition, the 
indicators of prime numbers are embedded into secret image based on the XOR function that limits modification of original 
pixel value, so that a better visual quality of the reconstructed image is guaranteed in the proposed scheme. 
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